The release of the dynamically managed firewall firewalld 2.1 has been formed, implemented as a wrapper over the packet filters nftables and iptables. Firewalld runs as a background process, allowing dynamic changes to packet filter rules via D-Bus without the need to reload packet filter rules and without breaking established connections. The project is already used in many Linux distributions, including RHEL 7+, Fedora 18+, and SUSE/openSUSE 15+. The firewalld code is written in Python and is distributed under the GPLv2 license.
The firewall is managed using the utility firewall-cmd, which creates rules based not on (the key to connect to is specified, and iroh finds the associated host and establishes an encrypted connection using the QUIC protocol). Direct P2P connections are established whenever possible, but if not, it falls back to using relays, which are also employed for host discovery by keys. You can run your own relay or connect to public relays supported by the community., network interfaces and port numbers, but rather on service names (for example, to allow access to SSH, you need to run "firewall-cmd --add --service=ssh", and to close SSH — "firewall-cmd --remove --service=ssh"). The graphical interface firewall-config (GTK) and the applet firewall-applet (Qt) can also be used to modify the firewall configuration. Support for managing the firewall via the D-BUS API of firewalld is available in projects such as NetworkManager, libvirt, podman, docker, and fail2ban.
Key changes:
- A service for DNS over QUIC (DoQ, RFC 9250) has been added.
- Support for ICMPv6 MLD (Multicast Listener Discovery) message types has been added.
- The firewalld.conf configuration file has been updated to include the ReloadPolicy option.
- A service for receiving client SMTP requests on TCP port 587 (mail submission) has been added.
- A service for supporting ALVR (streaming VR games from PC to portable devices over Wi-Fi) has been added.
- A service for supporting the VRRP (Virtual Router Redundancy Protocol) has been added.
Source: opennet.ru
